diff --git a/ChangeLog b/ChangeLog index a984dd4..a04dc34 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,9 @@ # ChangeLog for squashmount +*squashmount-15.4.3_p2 + Martin Väth : + - Remove CapabilityBoundingSet: It breaks overlay and possibly others + *squashmount-15.4.3_p1 Martin Väth : - Fix systemd unit paths in README diff --git a/systemd/system/squashmount.service b/systemd/system/squashmount.service index e81f399..c1e1d2f 100644 --- a/systemd/system/squashmount.service +++ b/systemd/system/squashmount.service @@ -7,7 +7,6 @@ After=local-fs.target systemd-tmpfiles-setup.service # long timeout in /etc/systemd/system/squashmount.service.d/timeout.conf TimeoutStopSec=1800 Type=oneshot -CapabilityBoundingSet=CAP_CHOWN CAP_DAC_OVERRIDE CAP_SYS_ADMIN CAP_SYS_MODULE MemoryDenyWriteExecute=true NoNewPrivileges=true PrivateNetwork=true